This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json) Hash identifier: Yal28/Wx+TSwNJALrvJx3l0GNL7vOvAaDyJxQei6Ei4= Subject key identifier: EE:23:E3:B1:10:33:77:13:33:13:D0:46:0D:D9:91:A0:00:E6:43:CF Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac Certificate serial: 019B59E42EAB5265D832862E03D67DC50778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft Manifest number: 0A74 Signing time: Fri 26 Dec 2025 09:01:24 +0000 Manifest this update: Fri 26 Dec 2025 09:01:24 +0000 Manifest next update: Sat 27 Dec 2025 09:01:24 +0000 Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: r4uvmhkWW3kXNSsDJZrxqVVEjiMun0buDOlmc1sM5rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2e:ab:52:65:d8:32:86:2e:03:d6:7d:c5:07:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac Validity Not Before: Dec 26 09:01:24 2025 GMT Not After : Dec 27 09:01:24 2025 GMT Subject: CN=ee23e3b1103377133313d0460dd991a000e643cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:74:80:b8:07:ec:fb:48:ef:c3:9a:37:2b:48: 91:38:bd:a0:44:68:75:79:ae:f0:bc:d6:85:cf:18: 96:92:25:cb:eb:c2:b5:4b:b7:69:a7:3a:86:2b:1e: 83:bb:4f:9b:97:2b:d4:6d:c3:5a:6f:ae:38:2a:35: cb:87:e5:0e:8e:40:e5:e9:fb:b9:59:5f:b8:5b:96: dd:ff:ec:0a:3e:47:12:98:c4:d4:9d:34:8c:2e:78: 0d:7f:4b:e7:28:6b:57:e0:71:36:ca:2d:31:e7:1f: 04:91:81:3d:6f:1b:71:cf:99:3f:a9:c9:81:e1:01: f3:58:2c:3d:64:6e:bd:fc:e9:45:28:ac:89:83:60: bc:e7:61:fc:c8:a7:14:9e:0c:d8:e0:cd:fa:f7:a6: 96:5a:b2:6e:84:51:d1:37:57:38:05:33:33:63:91: 76:02:b4:b3:a4:e2:e7:cc:fa:37:6b:4f:7d:bf:df: 61:55:c2:61:21:c3:11:4f:03:b9:60:14:f5:b3:82: 70:6a:4c:fb:16:db:f7:f3:99:81:15:dc:f3:a4:70: 5a:5f:4d:c2:18:2a:82:4a:a4:89:35:13:d7:b8:40: 80:78:ee:ef:86:f4:24:d3:f5:b9:e5:9b:bb:cd:52: 47:45:10:e9:d2:84:9e:0a:08:21:8b:62:00:55:3d: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:E3:B1:10:33:77:13:33:13:D0:46:0D:D9:91:A0:00:E6:43:CF X509v3 Authority Key Identifier: keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:38:b6:38:6b:e0:c4:78:04:16:ca:64:d4:e7:0c:15:03:96: 23:d3:68:dd:77:b6:47:15:8c:69:05:7c:f1:7e:4e:1f:1b:a6: b3:42:e6:6f:15:59:d0:93:25:77:4d:7b:19:69:ad:02:93:17: 7d:08:94:f1:00:f8:d1:eb:03:ae:48:e4:2e:94:62:a0:47:86: 19:f5:6b:64:5c:5f:8a:eb:55:d5:a5:1d:7c:3e:65:75:3e:6a: 11:e0:c2:99:6f:37:b5:9c:45:55:3d:8a:ac:26:fa:f2:10:b3: 4f:5f:da:a5:d2:7f:4e:f2:70:ef:85:96:43:3b:79:ee:be:7a: 1e:99:57:fe:22:86:f2:b1:a7:60:59:09:3f:68:d4:37:b2:85: 6f:ed:aa:e3:44:f5:62:86:c8:19:c7:03:08:58:d7:08:94:21: 00:b9:30:69:39:89:80:a0:35:c3:1a:ae:83:b6:82:be:5b:15: c5:3b:4e:92:9a:a1:96:5f:da:8e:c6:88:6c:d3:77:d6:cf:58: 5c:75:60:b5:e1:34:b6:02:10:f9:97:2a:bb:ec:41:e0:1a:35: bf:01:d1:68:d6:44:3c:f6:4d:e3:21:0a:58:9a:9c:a0:52:37: 0b:d0:64:04:5a:65:3d:bf:2d:0a:a5:85:90:14:e5:38:18:5b: 1d:23:be:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5C6rUmXYMoYuA9Z9xQd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh YjAwYWMwHhcNMjUxMjI2MDkwMTI0WhcNMjUxMjI3MDkwMTI0WjAzMTEwLwYDVQQD EyhlZTIzZTNiMTEwMzM3NzEzMzMxM2QwNDYwZGQ5OTFhMDAwZTY0M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53SAuAfs+0jvw5o3K0iROL2gRGh1 ea7wvNaFzxiWkiXL68K1S7dppzqGKx6Du0+blyvUbcNab644KjXLh+UOjkDl6fu5 WV+4W5bd/+wKPkcSmMTUnTSMLngNf0vnKGtX4HE2yi0x5x8EkYE9bxtxz5k/qcmB 4QHzWCw9ZG69/OlFKKyJg2C852H8yKcUngzY4M3696aWWrJuhFHRN1c4BTMzY5F2 ArSzpOLnzPo3a099v99hVcJhIcMRTwO5YBT1s4Jwakz7Ftv385mBFdzzpHBaX03C GCqCSqSJNRPXuECAeO7vhvQk0/W55Zu7zVJHRRDp0oSeCgghi2IAVT0UjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4j47EQM3cTMxPQRg3ZkaAA5kPPMB8GA1UdIwQY MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3 LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDi2OGvg xHgEFspk1OcMFQOWI9No3Xe2RxWMaQV88X5OHxums0LmbxVZ0JMld017GWmtApMX fQiU8QD40esDrkjkLpRioEeGGfVrZFxfiutV1aUdfD5ldT5qEeDCmW83tZxFVT2K rCb68hCzT1/apdJ/TvJw74WWQzt57r56HplX/iKG8rGnYFkJP2jUN7KFb+2q40T1 YobIGccDCFjXCJQhALkwaTmJgKA1wxqug7aCvlsVxTtOkpqhll/ajsaIbNN31s9Y XHVgteE0tgIQ+Zcqu+xB4Bo1vwHRaNZEPPZN4yEKWJqcoFI3C9BkBFplPb8tCqWF kBTlOBhbHSO+zQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:02 2025 by rpki-client